Use LDAP user and group filters

Kun slutbruger-hjælpen er for tiden oversat til dansk. Hjælp til installation og administration af Zylinc-løsninger er for tiden på engelsk.

Dette emne er fortrinsvis for administratorer og/eller folk som bestyrer en Zylinc-løsning

LDAP (Lightweight Directory Access Protocol) queries are a standardized way to provide search criteria for a directory search. You can use LDAP queries as filters to reduce the number of Active Directory (AD) groups or users that the Zylinc solution imports.

To learn about LDAP queries you can search the internet for ldap search filter syntax.

In the following, we provide some widely used filters, and a description of some of the most common concepts.

Example:
(cn=*)

Example:
(objectClass=user)

Example:
(memberOf:1.2.840.113556.1.4.1941:=<Distinguished Name of the group>)

If you don’t specify :1.2.840.113556.1.4.1941: your query will not return nested group members.

Example:
(&(|(telephoneNumber=*)(mobile=*)) (!(userAccountControl:1.2.840.113556.1.4.803:=2)))

(&(Condidtion 1) (Condition 2) (Condition 3) (Condition n))

Example: Import person AND user
(&(objectCategory=person)(objectClass=user))

(|(Condidtion 1) (Condition 2) (Condition 3) (Condition n))

For an example, see the previous example of uses that have either a phone number or a mobile number or both.

(!(Condition 1))

Example: NOT disabled. (userAccountControl:1.2.840.113556.1.4.803:=2 means disabled users.)
(!userAccountControl:1.2.840.113556.1.4.803:=2)

Example: Return (person) AND (user) AND (NOT disabled)
(&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2))

Example:
(&(objectCategory=person)(objectClass=user) (!userAccountControl:1.2.840.113556.1.4.803:=2) (memberOf:1.2.840.113556.1.4.1941:=CN=ZySync,CN=Users,DC=Zylinc,DC=Com))

Example:
(msExchHomeServer=*)

Softerra LDAP Browser is a popular LDAP management tool. You can use Softerra LDAP Browser’s filter builder feature to easily create new filters, or to view existing filter strings in a graphical way so that you can better understand them.

To use the filter builder feature of Softerra LDAP Browser, copy and paste the required filter sting as illustrated, and then click the areas marked with red circles:

Next: Import keywords from CSV files